Information Security Analyst

Information Security Analyst

To apply, please visit:

• Job Title: Information Security Analyst
• Department: Infrastructure
• Campus
  
  Location:
  
  Main Campus
• FLSA Status: Exempt/Salaried

• 2080 Hours per year
• 12 Months per year
• 40 Hours per week (Estimated)

Colorado College is a nationally recognized, residential liberal arts college with 2,100 students from around the world. Employees set the stage for student success by bringing their diverse experience and knowledge to the table. The college actively promotes a dynamic and inclusive environment in which students and employees of diverse backgrounds, cultures, and perspectives can learn and work.

Join Colorado College as an Information Security Analyst and help protect the technology, systems, and data that support our vibrant campus community while advancing a culture of cybersecurity awareness and resilience. This position supports the organization's information security program by monitoring, analyzing, and improving institutional security controls. The role assists with securing identity, network, cloud, application, and infrastructure environments through risk analysis, control validation, vulnerability review, and support of secure technology practices.

It also supports threat detection, security partner coordination, incident response, and proactive review of security events and trends. In addition, the position assists with awareness and phishing simulation efforts to reduce human risk and strengthen the overall security posture.

• Security Control Analysis and Engineering Support:
• Supports the review, validation, and improvement of identity, network, and infrastructure security controls, including conditional access, privileged identity management, multi-factor authentication, firewalls, network admission control, and segmentation technologies.
• Partners with other technical teams to analyze configurations, identify control gaps, document findings, and track remediation.
• Assists with ensuring security controls are operating effectively and aligned with institutional risk and security standards.
• Security Awareness and Risk Reduction:
• Assists with the administration, analysis, and reporting of the institutional security awareness and phishing simulation program.
• Uses campaign data to identify risk trends, support targeted education efforts, and help reduce user‑related security risk across the organization.
• Security Systems and Vendor Support:
• Supports the review of software, vendors, and technology integrations to help ensure alignment with security requirements, including single sign‑on, logging, data privacy, access control, and secure implementation practices.
• Assists with security assessments, documents findings, identifies potential control gaps, and escalates risks to security or IT leadership.
• Supports outsourced SOC/MSSP operations by reviewing alerts and escalations, coordinating follow‑up, assisting with detection tuning requests, and tracking vendor performance against established procedures and expectations.
• Incident Response and Threat Management:
• Participates in technical incident response efforts, including investigation, containment, eradication, recovery support, forensic analysis support, and post‑incident improvement activities.
• Reviews identity, firewall, endpoint, and infrastructure logs to support continuous security monitoring, identify potential threats, detect policy violations, and validate security control effectiveness.
• Assists with proactive threat hunting activities by analyzing security events, documenting findings, escalating suspicious activity, and supporting remediation or control improvement efforts.

• Bachelor's degree in a related field
• 3 years of experience in a related field
• One year of relevant work experience may be substituted for one year of required education (or one year of relevant academic coursework beyond the minimum requirement may be substituted for one year of required professional experience.)

Applicants are welcome to apply even if you do not meet the preferred qualifications. We value diverse…